Re: DS and Opt-in - a proposal

[Randy Bush <randy@psg.com>]

>> I can live with OPT-IN if it is designed to be a transition mechanism
>> for g|tLDs. If it is designed to be used throughout the whole tree
>> DNSSEC will loose.
> I'm afraid that it is very difficult (if not impossible) to restrict the
> domain holder like that.

yup.  create a feature and 95% of the uses of it will be unnecessary and
stoopid.  so only create features when they're *really* needed and well-
scoped.  though i am still personally a bit uncomfortable with opt-in for
reasons related to this, the likely harm of unneeded uses seems low, and
the verisign gang whine soooo pathetically :-).

randy


to unsubscribe send a message to namedroppers-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.